Privacy Policy | PathSnapper

PathSnapper.com

Last Updated: 14/10/2026

At PathSnapper, we are committed to protecting your privacy and being clear about how we collect, use, and share your personal information. This Privacy Policy explains our data practices in connection with our website, web application and related services (collectively, the "Service").

PathSnapper is operated by Mark Muller, trading as m-spacemedia, a sole trader based in the United Kingdom, who is the controller of your personal information.

Payment links may pass through our shared billing hub. The hub uses the payment reference to identify the correct product and forwards that reference to its payment page. It does not receive artwork or project files for routing, combine product accounts or grant access. Its processing is explained in the hub privacy notice.

Our pricing page contacts Paddle to obtain localized amounts and estimated tax after your initial cookie choice. Paddle can use your IP address to estimate your location. The final amount is determined at checkout. API credentials remain on our servers.

1. Information We Collect

1.1 Information You Provide

Account information: your name, email address, and password (stored only as a one-way hash), and whether you agreed to receive product news
Your images and projects: images you open in the app, and, when you save a project, the image, its colour map, your settings, the edited vector paths, print colours, and a thumbnail
Communications: messages and support requests you send us

1.2 Information From Our Payment Provider

Payments are handled by Paddle, our merchant of record. We never see or store your full card number. Paddle shares with us your customer, subscription and transaction identifiers, subscription status and dates, the passes you buy, and limited payment details (the card type, last four digits, expiry date, and cardholder name). We do not keep those card details.

1.3 Information Collected Automatically

Log data: IP address, access times, pages requested, browser type, and referring URLs, kept by our servers for security and troubleshooting
Bot protection: when you sign up, Cloudflare Turnstile may check your browser for signs of automated sign-ups
Preferences on your device: your theme, snap setting, and loaded swatch library are kept in your browser's storage and are not sent to us. An image you preview on /try is also kept there for up to two hours, for the app to open
Usage of our website, through Google Analytics, only if you agree to analytics cookies (section 8)
Cookies: as described in section 8

2. How We Use Your Information

To provide the Service: tracing your images, saving and reopening your projects, and producing the files you export
To manage your account, subscription and passes, and to check that they give you access to the app
To keep to one account per person: we compare a normalised form of your email address (for example ignoring dots and "+" tags in Gmail addresses) and check it against a list of disposable email providers
To send you emails about your account: email verification, password resets, subscription and pass notices, and reminders before saved projects are deleted. Receipts and invoices are sent by Paddle
To send you occasional product news, only if you agreed to it (you can opt out at any time)
To keep the Service secure and prevent fraud and abuse
To comply with legal obligations and enforce our Terms

Our lawful bases are: performing our contract with you (providing the Service and your subscription), our legitimate interests (security, fraud and abuse prevention, improving the Service), your consent (product news), and legal obligations.

3. Your Images

3.1 Tracing

When you open an image in the app, it is sent over an encrypted connection to our tracing engine, which runs on servers we operate. The engine keeps the image in memory only while you work and discards it 30 minutes after you last use it (or sooner, when you close the image or the engine restarts). It does not write your image to disk.

3.2 Free Previews

On our free preview page (/try) you don't need an account. Your image is scaled down in your browser and sent to the tracing engine, which traces it once, returns pictures of the result, and discards it. Nothing is saved. To stop the free preview being misused, we keep a count of previews per IP address for up to 24 hours. We store the IP address only as a one-way keyed hash, not the address itself, and the count is deleted when it expires. So that you can carry on in the app with the same image, your browser also keeps it on your device (in its local storage, not on our servers) for up to two hours, until the app opens it.

3.3 Saved Projects

When you save a project, its files are stored privately and are only available to you when signed in. They are deleted when you delete the project or your account, or 90 days after your access ends, that is when your subscription ends or your pass runs out (we email you 14 days beforehand).

3.4 AI Clean-up Runs On Your Device

The optional AI clean-up runs entirely in your browser, using the open-source Real-ESRGAN model and ONNX Runtime, which your browser downloads from our website the first time you use it. Your image is not sent to us or to any third-party AI provider for this.

3.5 No Training, No Browsing

We do not use your images or projects to train artificial intelligence models. We do not look at your images or projects, except when you ask us to for support, or where we must to investigate abuse or comply with the law.

4. Data Sharing and Disclosure

We share personal information only with:

Paddle (paddle.com), our merchant of record, who processes payments, tax, invoices, and refunds under its own privacy policy
Our hosting provider, which runs the servers for the website, the tracing engine, and saved projects
Our email delivery provider, for account emails
Cloudflare, for the Turnstile bot check at sign-up
Google Fonts, from which your browser loads the fonts used on our pages; Google receives your IP address and browser details when it does
Google Analytics, only if you agree to analytics cookies (see section 8)
Authorities, when required by law, court order, or governmental authority, or where we reasonably believe there is a risk of serious harm
A buyer or successor, in connection with a sale or transfer of the business

We do not sell your personal information, and we do not share it with third parties for their marketing purposes.

5. Data Retention

Account information is kept while your account exists, including the normalised email address used to keep to one account per person.
Saved projects are kept as described in section 3.3.
Images you open but don't save are discarded by the tracing engine within 30 minutes; free preview images straight after they are traced.
Free preview counts (per hashed IP address) are kept for up to 24 hours.
Server logs are kept for a short period for security and troubleshooting.

When you delete your account (from your account page), your subscription is cancelled, your saved projects are deleted straight away, and your other personal information is deleted or anonymised within 30 days, except where we must keep it by law. Paddle keeps its own transaction records as required by tax law.

6. Data Security

We protect your information with appropriate technical and organisational measures, including:

Encryption of data in transit (TLS)
Saved projects stored as protected files, available only to their owner
Short-lived access tokens between the app and the tracing engine
Passwords stored only as one-way hashes

However, no method of transmission over the internet or electronic storage is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.

7. Your Rights and Choices

Under UK and EU data protection law, you have the right to:

Access: request a copy of the personal information we hold about you
Correction: request correction of inaccurate or incomplete information (you can change your name and email address on your account page)
Deletion: request deletion of your personal information (you can delete your account yourself on your account page)
Portability: request a portable copy of your data
Objection: object to processing based on our legitimate interests
Restriction: request restriction of processing in certain circumstances
Withdraw consent: withdraw consent where processing is based on consent, such as product news

To exercise these rights, please contact us using the details in section 12. We will respond within the time required by applicable law.

8. Cookies and Local Storage

Necessary cookies are always used, because the Service cannot run without them:

A session cookie that keeps you signed in
A security token that protects forms against cross-site request forgery
A cookie that remembers your cookie choices (CookieConsent, kept for 2 years)

Analytics cookies are only set if you agree to them. We use Google Analytics to understand how visitors find and use our website, for example which pages are visited and how people arrive at them, so we can improve it. Google Analytics sets cookies such as _ga (kept for up to 2 years) and _gid (24 hours), and Google receives your IP address and browser details when it loads. Analytics only runs on our website's pages, never inside the app or on the dedicated payment receiver (/pay), and never sees your images or projects. Payment references are excluded from optional analytics.

We do not use advertising or marketing cookies.

When you first visit, we ask whether you agree to analytics cookies. You can change or withdraw your choice at any time from Cookie settings at the bottom of every page. Your theme and app preferences are kept in your browser's local storage, not in cookies. You can clear them through your browser settings.

9. International Data Transfers

Some of our service providers (such as Paddle, Cloudflare, Google and our email provider) may process your information outside the United Kingdom. Where they do, we rely on adequacy regulations or appropriate safeguards such as standard contractual clauses.

10. Children's Privacy

PathSnapper is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If you believe we have collected information from a child under 13, please contact us and we will delete it.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on our website and updating the "Last Updated" date. We encourage you to review this Privacy Policy periodically.

12. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us at:

m-spacemedia
Email: privacy@pathsnapper.com

Complaints: If you are not satisfied with our response, you have the right to complain to the UK Information Commissioner's Office (ico.org.uk) or, if you live in the EU/EEA, to your local data protection authority.